CVE-2023-52868

thermal: core: prevent potential string overflow

HIGH

7.8

CVSS Score

Published: May 21, 2024 at 03:31 PM UTC

Updated: June 17, 2026 at 06:43 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 0.2%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: thermal: core: prevent potential string overflow The dev->id value comes from ida_alloc() so it's a number between zero and INT_MAX. If it's too high then these sprintf()s will overflow.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

2.6.25 ≤ v < 4.14.3302.6.25 ≤ v < 4.19.2992.6.25 ≤ v < 5.10.2012.6.25 ≤ v < 5.15.1392.6.25 ≤ v < 5.4.2612.6.25 ≤ v < 6.1.632.6.25 ≤ v < 6.5.122.6.25 ≤ v < 6.6.22.6.25 ≤ v < 6.74.15 ≤ v < 4.19.2994.20 ≤ v < 5.4.2615.11 ≤ v < 5.15.1395.16 ≤ v < 6.1.635.5 ≤ v < 5.10.2016.2 ≤ v < 6.5.126.6 ≤ v < 6.6.22.6.25203d3d4aa482339b4816f131f713e1b8ee37f6dd

Vendor states this is fixed in 0f6b3be28c4d62ef6498133959c72266629bea97 (fixed)

Vendor states this is fixed in 3091ab943dfc7b2578599b0fe203350286fab5bb (fixed)

Vendor states this is fixed in 3a8f4e58e1ee707b4f46a1000b40b86ea3dd509c (fixed)

Vendor states this is fixed in 3f795fb35c2d8a637efe76b4518216c9319b998c (fixed)

Vendor states this is fixed in 6ad1bf47fbe5750c4d5d8e41337665e193e2c521 (fixed)

Vendor states this is fixed in 77ff34a56b695e228e6daf30ee30be747973d6e8 (fixed)

Vendor states this is fixed in b55f0a9f865be75ca1019aad331f3225f7b50ce8 (fixed)

Vendor states this is fixed in c99626092efca3061b387043d4a7399bf75fbdd5 (fixed)

Vendor states this is fixed in edbd6bbe40ac524a8f2273ffacc53edf14f3c686 (fixed)

Vendor states this is fixed in 2.6.25 (unaffected)

Vendor states this is fixed in 4.14.330 (unaffected)

Vendor states this is fixed in 4.19.299 (unaffected)

Vendor states this is fixed in 5.10.201 (unaffected)

Vendor states this is fixed in 5.15.139 (unaffected)

Vendor states this is fixed in 5.4.261 (unaffected)

Vendor states this is fixed in 6.1.63 (unaffected)

Vendor states this is fixed in 6.5.12 (unaffected)

Vendor states this is fixed in 6.6.2 (unaffected)

Vendor states this is fixed in 6.7 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references